← back
CVE-2007-2249

CVE-2007-2249

EPSS 7.0%
include/controlcenter/users.php in Phorum before 5.1.22 allows remote authenticated moderators to gain privileges via a modified (1) user_ids POST parameter or (2) userdata array.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/29889unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://osvdb.org/35059http://secunia.com/advisories/24932http://securityreason.com/securityalert/2617http://www.phorum.org/story.php?76http://www.securityfocus.com/archive/1/466286/100/0/threadedhttp://www.securityfocus.com/bid/23616http://www.securitytracker.com/id?1017936http://www.vupen.com/english/advisories/2007/1479http://www.waraxe.us/advisory-49.html